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V 1 . Method for forming a first commutative checksum 

TLKPl) for digital data which are grouped into a number 
oel data segments (Di, i = 1 . - n) , by a computer, 

a) \ in which a segment checksum (PSi) is formed for 
eachXdata segment (Di), 

b) ^n which the first commutative checksum (KP1) is 
formed \by a commutative operation (0) on the segment 
checksumk (PSi), and 

c) in wRAch the first commutative checksum (KP1) is 
cryptograph\cally protected by using at least one 
cryptographic^ operation . 

2. MethodX for checking a predetermined 

cryptographic commutative checksum which is allocated 
to digital data which are grouped into a number of data 
segments, by a computer, 

a) in which the cryptographic commutative checksum is 
subjected to an invers\ cryptographic operation to form 
a first cryptographic clrtecksum (KP1), 

b) in which a second segment checksum (PSj) is formed 
for each data segment (Dj, \ = a z) , 

c) in which a second commutative checksum (KP2) is 
formed by a commutative operation (©) on the second 
segment checksums (PSj), and \ 

d) in which the second commutative checksum (KP2) is 
checked for a match with the f irstNcommutative checksum 
(KP1). \ 

3- Method for forming and crocking a first 

commutative checksum (KP1) for digital^ data which are 
grouped into a number of data segments \fDi, i = 1 . . 
n) , by a computer, \ 
a) in which a segment checksum (PSi) is\formed for 
each data segment (Di), \ 
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kri in which the first commutative checksum (KP1) is 
foOTied by a commutative operation (©) on the segment 
checksums (PSi) , 

c) i>n which the first commutative checksum (KP1) is 
cryptogisaphically protected by using at least one 
cryptographic operation, a cryptographic commutative 
checksum being formed, 

d) in whicrv the cryptgographic commutative checksum 
(KP1) is subjected to an inverse cryptographic 
operation to form a first reconstructed cryptographic 
checksum (KP1), 

e) in which a second segment checksum (PSj) is formed 
for each data segment\(Dj, j = a z) of the digital 
data to which the first\ commutative checksum (KP1) is 
allocated, 

f) in which a second corifonutative checksum (KP2) is 
formed by a commutative operation (0) on the second 
segment checksums (PSj), and 

g) in which the second commutafisive checksum (KP2) is 
checked for a match with the >first reconstructed 
commutative checksum (KP1) 

Method accoBfJTltog to one of Claims 1 to 3, in 
whiclitrh^segment phdcksums (PSi, PSj) are formed in 
accordance wrtls^t Jrea^fc* one of the following types: 

- forming a hashing^ai^je, 

- forming CRC codes, 

- usi>Ha at least one cryptographic oi^way function. 

5. Method according to one of Claims 1 to 4 , in 
which the cryptographic operation is a symmetric 
cryptographic method. 

6. Method accor^Sqq to one of Claims 1 to 4, in 
which the cryptographic^Qperation is an asymmetric 
cryptographic method. >v 
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7\ Method according to one of Claims 1 to 6, in 

whib{i the commutative .operation (®) exhibits the 
property of associati/vit^ 

8. Ivffe<hod accorJding^V to one of Claims 1 to 7, in 
which digital*, data \a^fe protected, the data segments 
(Di) of which arfe^not tied to an order. 

9. Method accob^ing to one of Claims 1 to 7, in 
which digital data are protected which are processed in 
accordance with a network management protocol. 

kQ. Arrangement for forming a first commutative 

checksum (KP1) for digital data which are grouped into 
a nufcnber of data segments (Di, i = 1 .. n) , by means of 
an ar\thmetic and logic unit which is arranged in such 
a manneV that 

a) a segment checksum (PSi) is formed for each data 
segment (d\) , and 

b) the firsus. commutative checksum (KP1) is formed by a 
commutative operation (©) on the segment checksums 
(Psi) , and \ 

c) the first \ commutative checksum (KP1) is 
cryptographically \rotected by using at least one 
cryptographic operation . 

11- Arrangement fo^t checking a predetermined first 

commutative checksum whrfch is allocated to digital data 
which are grouped into aV number of data segments, by 
means of an arithmetic and \ogic unit which is arranged 
in such a manner that \ 

a) the cryptographic commutative checksum is 
subjected to an inverse cryptographic operation to form 
a first cryptographic checksum (KPJSi, 

b) a second segment checksum (Psj)\is formed for each 
data segment ( D j , j = a . . z ) , \ 
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a second commutative checksum (KP2) is formed by a 
cdcnmutative operation (©) on the second segment 
checksums (PSj), and 
d) N:he second commutative checksum (KP2) is checked 
for a m^tch with the first commutative checksum (KP1). 
12. Arrangement for forming and checking a first 

commutative checksum (KP1) for digital data which is 
grouped intdv a number of data segments (Di, i = 1 
n) , by means \f at least one arithmetic and logic unit 
which is arranged in such a manner that 

a) a segment checksum (PSi) is formed for each data 
segment (Di) , 

b) the first commutVtive checksum (KP1) is formed by 
a commutative operation (©) on the segment checksums 
(Psi) , 

c) the first commutative checksum (KP1) is 
cryptographically protecteck by using at least one 
cryptographic operation, a Vryptographic commutative 
checksum being formed, 

d) the crystographic commutatiVe checksum (KP1) ±s 
subjected to an inverse cryptographic operation to form 
a first reconstructed cryptographic Yhecksum (KP1) , 

e) a second segment checksum (PSj) \^ formed for each 
data segment (Dj, j = a z) of the\digital data to 
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which the first commutative check 
allocated, 

f) a second commutative checksum (KP2) is^ 
commutative operation (©) on the s 
checksums (Psj), and 

g) the second commutative checksum (KP2) 
for a match with the first reconstructed 
checksum (KP1) . 

l3>-^ Arrangement facaording 
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rta which the arithmetic and logic unit is arranged in 
suoh a manner that the segment checksums (PSi, PSj) are 
formVi in accordance with at least one of the following 
types \ 

- formiW a hashing value, 

- formingvCRC codes, 

- using atVLeast one cryptographic one-way function. 

14. Arrangement according to one of Claims 10 to 
13, in which Vhe arithmetic and logic unit is arranged 
in such a mannWr that the cryptographic operation is a 
symmetric cryptographic methoc 

15. Arrangement according tfc one of Claims 10 to 
13, in which the arithmetic lancA log^c unit is arranged 
in such a manner tha\ the cryptographic operation is an 
asymmetric cryptographic method. 

16. Arrangement according to one of Claims 10 to 

15, in which the arithmetic and logic unit is arranged 
in such a manner that tfte commutative operation (©) 
exhibits the property of associativity. 

17. Arrangement according^ to one of Claims 10 to 

16, in which the arithmetic and, logic unit is set up in 
such a manner that the digital cteta are protected, the 
data segments (Di) of which are not tied to an order. 

18. Arrangement according to dne of Claims 10 to 
16, in which the arithmetic and logic unit is arranged 
in such a manner that the digital d\ta are protected 
which are processed in accordance Vith a network 
management protocol. \ 
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